Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/b1282f-71c5-47e7-aea1-4d05498aa97d/1/sPiohfd3bSq5m7TyDoTTBuA5SqM.mft
File: sPiohfd3bSq5m7TyDoTTBuA5SqM.mft (raw, json)
Hash identifier: /dtNyUdeKDWJwX3Yaq2auSFDmRqtdlH0FhmPrHBVjOA=
Subject key identifier: 3C:A2:85:D2:16:76:32:8C:A9:80:E7:92:9A:6F:8F:D4:7C:0B:29:3A
Authority key identifier: B0:F8:A8:85:F7:77:6D:2A:B9:9B:B4:F2:0E:84:D3:06:E0:39:4A:A3
Certificate issuer: /CN=b0f8a885f7776d2ab99bb4f20e84d306e0394aa3
Certificate serial: 0194BD4E6F2E0DF1F0ADCAB1E4FE9AA895FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sPiohfd3bSq5m7TyDoTTBuA5SqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/b1282f-71c5-47e7-aea1-4d05498aa97d/1/sPiohfd3bSq5m7TyDoTTBuA5SqM.mft
Manifest number: 11BE
Signing time: Fri 31 Jan 2025 17:00:21 +0000
Manifest this update: Fri 31 Jan 2025 17:00:21 +0000
Manifest next update: Sat 01 Feb 2025 17:00:21 +0000
Files and hashes: 1: SvV3htVhXEPI7wFXdPP_R5R2jOo.roa (hash: ADbpdowWW8HzIQ0XmIe2lqnPixhQxjU2ME36RexdQ8I=)
2: sPiohfd3bSq5m7TyDoTTBuA5SqM.crl (hash: dOsAJAh5qsd8JmfPyR4f3fCtBzak1SM3DBJvqGNiw8k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:6f:2e:0d:f1:f0:ad:ca:b1:e4:fe:9a:a8:95:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0f8a885f7776d2ab99bb4f20e84d306e0394aa3
Validity
Not Before: Jan 31 17:00:21 2025 GMT
Not After : Feb 1 17:00:21 2025 GMT
Subject: CN=3ca285d21676328ca980e7929a6f8fd47c0b293a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:2b:70:12:f8:f0:05:9c:b9:a7:7d:15:d4:3a:
c2:bc:92:aa:7c:a1:e9:52:a6:e2:84:f0:c4:67:bd:
06:16:cb:e2:dc:2e:95:9f:1b:ca:9a:3a:22:79:57:
14:82:b8:44:35:8f:4b:37:bb:c2:db:2c:0e:4b:6c:
bb:3c:e4:12:34:9c:0a:52:0f:3c:60:fd:7d:80:08:
c5:9f:b6:80:68:28:24:7f:fe:05:56:32:7f:eb:9c:
66:95:2e:56:e0:30:d2:94:90:30:d0:7c:07:b6:42:
18:22:53:4d:5e:f8:03:28:5e:f4:a1:59:43:ae:36:
5b:01:31:a7:f4:59:c6:cd:10:20:e4:94:8a:41:43:
a9:43:f2:f8:8e:93:ea:c2:19:71:2a:c1:6e:8b:81:
17:ee:da:6e:1a:9f:d1:5d:04:ca:68:c3:88:d2:ac:
7a:59:ee:62:c6:3b:dd:4c:8b:74:d9:9d:a4:b0:c9:
78:99:8c:b6:9a:59:44:36:2e:ea:51:70:74:42:05:
b8:a7:7b:bc:82:54:bd:53:bf:64:da:c0:3a:33:01:
f2:bb:21:e0:f0:26:6d:c1:52:ea:ca:54:ce:31:a4:
d9:bb:63:1a:42:6a:81:67:02:67:2f:19:c6:fd:10:
0c:d6:04:ff:de:bd:d2:ad:37:f7:80:1e:ac:b8:b6:
47:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:A2:85:D2:16:76:32:8C:A9:80:E7:92:9A:6F:8F:D4:7C:0B:29:3A
X509v3 Authority Key Identifier:
keyid:B0:F8:A8:85:F7:77:6D:2A:B9:9B:B4:F2:0E:84:D3:06:E0:39:4A:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sPiohfd3bSq5m7TyDoTTBuA5SqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b1282f-71c5-47e7-aea1-4d05498aa97d/1/sPiohfd3bSq5m7TyDoTTBuA5SqM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b1282f-71c5-47e7-aea1-4d05498aa97d/1/sPiohfd3bSq5m7TyDoTTBuA5SqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:c2:d4:0b:8d:45:4e:34:c2:af:ca:26:4e:75:3e:d9:d0:3b:
85:58:de:e3:05:cc:10:46:6f:b3:e3:be:93:64:17:d6:f0:27:
2d:5a:b0:d8:af:3f:e5:d9:56:72:5e:f4:ee:b9:5a:c9:de:4b:
62:0b:68:f2:54:2a:14:26:84:b2:42:85:cf:14:72:12:b9:e3:
59:2c:a7:92:e8:d2:fe:42:b9:cd:b0:ba:1a:0c:be:5f:b0:5b:
b1:e9:74:81:c4:28:9c:ff:8a:14:9f:26:47:37:33:bb:8b:f3:
c4:3e:2d:66:4b:bb:6b:c8:dd:0f:3d:1f:71:83:1f:b7:73:4e:
cc:3f:40:de:a4:b8:cf:3c:07:65:05:97:2e:8e:20:38:e4:e7:
3b:f2:8d:f3:4a:32:b0:12:f6:67:b7:51:26:f2:07:aa:64:87:
89:45:93:bc:7a:e0:18:60:eb:8d:4c:4f:b9:77:a4:27:0d:a4:
c0:c3:7f:ff:3b:0b:ca:15:b6:c2:77:d1:ed:7c:1f:e6:41:77:
44:42:9e:24:a7:8d:26:08:d0:69:39:c8:f8:43:c2:59:d4:ec:
b8:3c:bd:ef:ab:2b:9c:f8:0d:4b:7e:cd:d9:4f:d6:55:6f:20:
4c:2d:db:95:ee:39:d8:9d:08:07:59:d0:5e:02:85:8d:1f:6b:
c7:0b:c5:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:01:59 2025 by rpki-client